> ## Documentation Index
> Fetch the complete documentation index at: https://docs.iru.com/llms.txt
> Use this file to discover all available pages before exploring further.

# Device Requirements

> Review device requirements for Iru Endpoint. Check supported operating systems, minimum versions, and hardware specs for Mac, iOS, Windows, and Android.

Iru supports managing Apple devices, Windows computers, and Android mobile devices. For a detailed breakdown of supported operating systems and requirements, see the sections below. You can also read our [overview](/en/iru/platform-overview/iru-overview) for more information.

## General Requirements

* **Active internet connection** - Required for enrollment, policy updates, and device management
* **Hardware compatibility** - All hardware and software combinations must be officially supported by the platform vendor

<Tabs>
  <Tab title="Apple">
    ### Apple Device Support

    Iru supports management of macOS, iOS, iPadOS, tvOS, and visionOS devices using Apple's Mobile Device Management (MDM) framework and Iru's proprietary agents.

    **Supported Operating Systems:**

    * **macOS**: macOS 26 Tahoe, macOS 15 Sequoia, macOS 14 Sonoma
    * **iOS**: iOS 17 and higher
    * **iPadOS**: iPadOS 17 and higher
    * **tvOS**: tvOS 17 and higher
    * **visionOS**: visionOS 2 and higher

    ### Apple Device Requirements

    * All hardware and software combinations must be officially supported by Apple and not virtualized
    * Iru does not support exploitations of firmware, hardware, or operating systems, or devices running within virtual machines
    * Iru does not support using a cloned image of a computer that is already enrolled. This includes both physical and virtual devices. When device enrollment or identity tokens are replicated between devices, Iru device enrollment or synchronization failures will occur
    * Proper network connectivity for MDM communication

    ### Apple End of Support

    <Warning>
      As of **Wednesday, October 15, 2025**, macOS 12 Monterey, macOS 13 Ventura, and iOS, iPadOS, and tvOS 16 are considered End of Support in Iru, meaning that Iru will no longer add features or bug fixes for these operating system versions. As of **Wednesday, January 21, 2026**, Iru refuses new enrollments from devices running them with the error: `enrolling with management server failed. Unexpected error. (MDMResponseStatus:400)`
    </Warning>

    **End of Support:**

    * macOS 13 Ventura
    * macOS 12 Monterey
    * iOS 16
    * iPadOS 16
    * tvOS 16

    **End of Life:**

    * macOS 11 and earlier
    * iOS 15 and earlier
    * iPadOS 15 and earlier
    * tvOS 15 and earlier

    <Warning>
      End of Support means that Iru no longer provides support for these operating system versions. End of Life means that Iru no longer allows enrollments or provides support for these operating system versions. A device running an operating system that qualifies as End of Life will receive an error response from enrollment attempts and require an update to a supported operating system to enroll with Iru.
    </Warning>

    ### Apple Considerations

    * **Apple Silicon vs Intel**: Iru supports both Apple Silicon and Intel-based Macs
    * **Virtualization**: Virtualized macOS instances are not supported
    * **Hardware Requirements**: Must meet Apple's minimum system requirements for the supported macOS version
    * **Device Types**: Supports Mac computers, iPhones, iPads, Apple TVs, and Apple Vision Pro devices

    ### Apple Troubleshooting

    <AccordionGroup>
      <Accordion title="Enrollment failures">
        **Common enrollment errors and solutions:**

        **"Device not eligible for enrollment"**

        * Check if device is running a supported OS version (macOS 14 or higher, iOS 17 or higher, iPadOS 17 or higher)
        * Verify device isn't already enrolled in another MDM solution
        * Ensure the device has been removed from Apple Business or Apple School Manager if it was previously enrolled elsewhere

        **"Profile installation failed"**

        * Check network connectivity to `*.iru.com` domains
        * Verify corporate firewall allows MDM traffic on ports 443 and 80
        * Ensure device has sufficient storage space (at least 1GB free)
        * Try enrolling from a different network (home vs corporate) to isolate network issues

        **"Enrollment timeout"**

        * Disable VPN during enrollment process
        * Check if device is behind a proxy that blocks MDM traffic
        * Verify system date and time are correct on the device
      </Accordion>

      <Accordion title="Management issues">
        **Profile and policy problems:**

        **"Library items not installing"**

        * Check device compliance status in Iru dashboard
        * Verify device is assigned to correct blueprint
        * Review device logs for specific error messages
        * Ensure user has necessary permissions for app installations

        **"Device not checking in"**

        * Check if device has internet connectivity
        * Verify MDM profile is still installed (Settings > General > VPN & Device Management)
        * Look for network restrictions blocking communication with Iru servers
        * Check if device is in low power mode or has background app refresh disabled

        **"Settings not applying"**

        * Verify device meets minimum OS version requirements for specific settings
        * Check if setting conflicts with existing device configuration
        * Review device compliance status and any blocking conditions
        * Ensure proper user permissions for setting changes
      </Accordion>
    </AccordionGroup>
  </Tab>

  <Tab title="Windows">
    ### Windows Support

    Management of Windows is supported with a combination of Microsoft's MDM framework and Iru's proprietary Windows agent which supports app management (installation, upgrade, and uninstall), gathering application inventory from the device, and running custom PowerShell scripts.

    **Supported Operating Systems:**

    * **Windows**: Windows 11 24H2 or 25H2 (Pro, Pro Education, Enterprise, Education)

    ### Windows Requirements

    * Windows devices must be running Windows 11 24H2 or 25H2
    * Local administrator rights required for initial enrollment
    * Proper network connectivity for MDM and agent communication
    * Serial numbers — Physical devices include these automatically; virtual machines need them defined

    ### Windows Troubleshooting

    <AccordionGroup>
      <Accordion title="Enrollment failures">
        **Common enrollment errors and solutions:**

        **"Access denied" or "Insufficient privileges"**

        * Ensure user account has local administrator rights during enrollment
        * Run enrollment command as administrator (right-click Command Prompt > "Run as administrator")
        * Check if Group Policy is blocking MDM enrollment
        * Verify Windows edition supports MDM (Pro, Enterprise, or Education required)

        **"Enrollment failed - Device not supported"**

        * Verify Windows 11 24H2 or 25H2 is installed (check with `winver` command)
        * Ensure device meets minimum hardware requirements for Windows 11
        * Check if device is running in a virtual machine (some VMs may not support MDM)
        * Verify TPM 2.0 is enabled and functioning

        **"Network error during enrollment"**

        * Check Windows Firewall settings and ensure MDM traffic is allowed
        * Verify corporate proxy settings don't block `*.iru.com` domains
        * Disable VPN during enrollment if using corporate VPN
      </Accordion>

      <Accordion title="Management issues">
        **Agent and policy problems:**

        **"Iru agent not installing or updating"**

        * Check Windows Event Viewer for installation errors (Windows Logs > Application)
        * Verify Windows Update service is running and can download updates
        * Ensure device has at least 2GB free disk space for agent installation
        * Check if antivirus software is blocking agent installation or updates

        **"Policies not applying to device"**

        * Verify device is properly enrolled and shows as "Managed" in Settings > Accounts > Access work or school
        * Check device compliance status in Iru dashboard
        * Review Windows Event Viewer for policy application errors
        * Ensure device is assigned to correct blueprint in Iru

        **"Device not reporting to Iru"**

        * Check if Iru agent service is running (Services.msc > "Iru Agent")
        * Verify network connectivity to Iru servers
        * Review agent logs in `%ProgramData%\kandji\agent\logs`
        * Check Windows Defender or other security software isn't blocking agent communication
      </Accordion>
    </AccordionGroup>
  </Tab>

  <Tab title="Android">
    ### Android Support

    Iru supports management of Android devices using Google's Android Enterprise framework.

    **Supported Operating Systems:**

    * **Android**: Android 13 and higher

    <Note>
      Iru officially supports Android versions that receive security patches from Google. As of now, Google provides security patches for Android 13 and higher. For more information on Google's security patch support, see the [Android Security Bulletins](https://source.android.com/docs/security/bulletin).
    </Note>

    ### Android Requirements

    * Android devices must support Android Enterprise
    * Devices must be compatible with Google Play Services
    * Proper network connectivity for Google services and Iru management

    ### Android Troubleshooting

    <AccordionGroup>
      <Accordion title="Enrollment failures">
        **Common enrollment errors and solutions:**

        **"Device not compatible with Android Enterprise"**

        * Verify device is running Android 13 or higher
        * Check if device manufacturer supports Android Enterprise (Samsung, Google Pixel, OnePlus, etc.)
        * Ensure device isn't rooted or running custom ROM
        * Verify device has Google Play Services installed and updated

        **"QR code enrollment fails"**

        * Ensure device camera can properly scan QR codes
        * Check if device has sufficient storage space (at least 500MB free)
        * Verify network connectivity during enrollment process
        * Try manual enrollment using the Blueprint link if QR code continues to fail

        **"Google Play Services error"**

        * Update Google Play Services to latest version
        * Clear Google Play Services cache and data
        * Check if device has Google Play Store installed
        * Verify device isn't running a modified version of Android
      </Accordion>

      <Accordion title="Management issues">
        **Android Enterprise and app management problems:**

        **"Work apps not installing"**

        * Check if device is properly enrolled in Android Enterprise
        * Verify work profile is active (Settings > Work profile)
        * Ensure Google Play for Work is accessible
        * Check device compliance status in Iru dashboard

        **"Device not checking in"**

        * Verify work profile is enabled and active
        * Check network connectivity to Google services
        * Ensure device isn't in battery optimization mode for work apps
        * Review Android Enterprise app logs for connection errors

        **"Work profile issues"**

        * Check if work profile was disabled by user
        * Verify Android Enterprise policies are properly configured
        * Ensure device meets minimum requirements for work profile
        * Check if device storage is full (work profile needs additional space)
      </Accordion>
    </AccordionGroup>
  </Tab>
</Tabs>

## Network Requirements

All managed devices require internet connectivity to communicate with Iru services. For detailed network requirements, see [Using Iru on Enterprise Networks](/en/iru/requirements/using-iru-on-enterprise-networks).
